[cobalt-users] Re: qpopper update question (All Security 3.0.1-6579)

["Nick Voth" <nvoth@xxxxxxxxxxx>]

Florian,

I'm sorry that I don't have the URL's handy for the actual downloads, but
here is what I did on a RaQ3i:

1) deinstall POP before SMTP 1.2
2) Install the All Security 3.0.1-6579 (qpopper update)
3) install the new POP before SMTP 1.2-4

I also tested it to make sure it was working by:

1) dialing into a local ISP so I had a non-local IP address
2) tried to send a message to a Cobalt user WITHOUT checking POP first
3) I got an error that it wouldn't allow the action
4) checked the user's POP account on the Cobalt
5) tried to re-send the message with SMTP and it went fine.

Also, if you telnet to the Cobalt on port 110 you will get a response that
the version number is "<?>" or something similar. That is a feature in the
new qpopper.

Good luck.

-Nick Voth

> Message: 8
> From: "Florian Effenberger" <florian.effenberger@xxxxxxxxxxxxx>
> To: <cobalt-users@xxxxxxxxxxxxxxx>
> Date: Sun, 10 Sep 2000 11:51:10 +0200
> charset="iso-8859-1"
> Subject: [cobalt-users] qpopper update question (All Security 3.0.1-6579)
> Reply-To: cobalt-users@xxxxxxxxxxxxxxx
>
> Hello,
>
> I want to install All Security 3.0.1-6579 ("This security package
> contains an updated version of qpopper. The previous version of
> qpopper could possibly allow an attacker who has access to a valid
> account to obtain a shell with group-id 'mail', potentially allowing
> read/write access to all mail").
>
> I currently run the POP before SMTP package 1.2 on my RaQ3.
>
> Anyone can give me a dummy proof guide to install the new version with
> POP before SMTP support? Which POP before SMTP do I have to install?
>
> ftp://ftp.cobaltnet.com/pub/contrib/binaries/RaQ3-POP-before-Relay-1.2
> -4.pkg
> or
> ftp://ftp.cobaltnet.com/pub/contrib/binaries/RaQ4-RaQ3-POP-before-Rela
> y-1.3pre2.pkg
>
> Do I have to deinstall the old one (1.2) first? In which order do Ii
> have to (de)install?
>
> Thanks so much!
> Florian